Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejswsOhW0v-G8w0OP1lFqFcqe1E.roa
File: ejswsOhW0v-G8w0OP1lFqFcqe1E.roa (raw, json)
Hash identifier: vT9JsJpf/TSEIJnrMkXeTnA90eJmNzQ10Q938sXpLnU=
Subject key identifier: 7A:3B:30:B0:E8:56:D2:FF:86:F3:0D:0E:3F:59:45:A8:57:2A:7B:51
Certificate issuer: /CN=43039a68130f19631e1527946e1e127db1e8f9d9
Certificate serial: 018C1FBB60F2CA215BBEE302F11AB14A6597
Authority key identifier: 43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejswsOhW0v-G8w0OP1lFqFcqe1E.roa
Signing time: Thu 30 Nov 2023 10:17:02 +0000
ROA not before: Thu 30 Nov 2023 10:17:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/96 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18b:caf2:ca7a/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1f:bb:60:f2:ca:21:5b:be:e3:02:f1:1a:b1:4a:65:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43039a68130f19631e1527946e1e127db1e8f9d9
Validity
Not Before: Nov 30 10:17:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a3b30b0e856d2ff86f30d0e3f5945a8572a7b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:25:06:50:89:3e:15:f6:83:db:b1:d0:b7:86:
4c:1c:fb:45:8c:02:d6:4b:81:fe:85:eb:e6:89:f2:
df:1e:d9:0f:20:47:89:eb:65:fd:48:3b:83:4c:42:
15:d0:71:c5:34:84:36:c3:f5:25:b3:1c:5b:ff:2f:
b4:2e:ff:51:f8:07:34:d9:76:45:b2:d2:99:71:c2:
5c:a6:ec:ae:80:6b:31:8d:7b:00:40:80:04:13:e1:
57:67:35:48:07:ba:35:f8:9f:54:e4:2e:36:3a:ab:
08:6f:9c:60:f0:d7:34:36:7c:33:ae:21:aa:60:ec:
78:89:5d:3c:2e:7b:86:ab:c2:31:d5:03:f3:13:d5:
76:ed:e0:8f:41:c2:62:b2:ec:6f:91:88:87:e8:14:
56:c0:9e:17:50:10:af:2b:40:3d:c0:18:34:e6:5b:
5b:5b:24:53:d1:9b:99:93:c4:78:1f:bd:d4:a8:51:
87:6d:d3:d2:44:af:f7:fe:86:d3:1d:b8:da:b4:57:
57:f7:18:7d:f1:03:39:c7:7d:27:0c:d9:63:da:97:
34:11:e8:73:c7:ba:47:58:f8:ec:d1:e0:2b:61:93:
ca:21:19:f8:a4:eb:0f:1c:cc:07:10:ae:57:16:cf:
d9:27:6f:3b:49:76:06:0a:5c:75:fe:8f:59:17:1f:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3B:30:B0:E8:56:D2:FF:86:F3:0D:0E:3F:59:45:A8:57:2A:7B:51
X509v3 Authority Key Identifier:
keyid:43:03:9A:68:13:0F:19:63:1E:15:27:94:6E:1E:12:7D:B1:E8:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwOaaBMPGWMeFSeUbh4SfbHo-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/ejswsOhW0v-G8w0OP1lFqFcqe1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f60178-991a-4261-96a0-dd5c300be54e/1/QwOaaBMPGWMeFSeUbh4SfbHo-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
05:f6:c1:f5:cf:6b:bd:7b:fd:19:76:4b:5e:93:c2:e0:ce:d5:
aa:7d:be:9a:64:48:05:e7:d7:3f:f5:82:91:fe:0f:d6:fd:64:
c7:c0:dc:a3:91:55:44:f6:c3:75:5c:6d:d9:dd:a8:a6:29:15:
41:00:ec:61:c1:f9:42:24:2b:75:26:be:57:e0:ee:80:d4:c4:
64:6b:df:69:83:50:09:f3:dd:d9:c0:e7:b6:15:c3:ee:fe:15:
ac:05:01:16:2f:e5:03:8c:df:ce:86:be:4d:18:eb:e9:71:34:
63:1d:1c:19:52:87:ba:15:ea:f5:2f:31:b1:43:20:14:d2:4b:
17:0a:c4:30:9a:ac:90:1b:8a:5a:8b:fe:f7:69:90:64:ad:18:
9c:3e:94:da:f5:7d:c9:5f:5f:04:a1:91:80:3b:5d:eb:1b:c3:
b1:98:fc:50:4c:c2:7f:b7:a7:f7:4d:99:2a:f9:23:e1:0a:00:
9f:6d:fa:50:a7:c8:05:4b:0b:5e:65:58:48:cf:4c:d5:05:c0:
cc:87:e3:9f:a2:3d:ce:8b:4b:0b:d0:41:29:26:54:ab:a5:f2:
69:38:eb:6a:44:05:10:6f:01:23:8d:60:5d:49:f8:a1:75:e9:
6e:40:fa:58:eb:e6:e6:02:ac:f8:52:92:f1:32:b1:2a:6b:48:
b1:5a:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:20:32 2025 by rpki-client